|
Network World on Security
The latest security news, analysis, reviews and feature articles from NetworkWorld.com.
European court won't stop UK hacker's extradition to US
The European Court of Human Rights has refused U.K. hacker Gary McKinnon's appeal against demands for his extradition to the U.S.
12 Sly Web Tricks That Put You in Control
So it's Friday afternoon, the weekend is just around the corner, and you're up to no good. Rather than waste your time turning monitors upside down around the office, why not update your tech arsenal? If you have a computer or cell phone on hand, you're more than ready to beef up your weapons and spy kit with these 12 sly tricks. We'll teach you why and how (and with what) to do them, and tell you how well you can expect them to work. And you will forget where you heard this information...
Managing a trust-damaging event
How a credit card company or a card issuer manages a trust-damaging event, such as fraud, can have a major impact on long-term customer relationships.
Judge: Privacy advocate can post Social Security numbers
Can a state government prohibit an individual from posting Social Security numbers online that were easily and legally obtained from government Web sites?
Malware infects space station laptops
Malware has managed to get off the planet and onto the International Space Station, NASA confirmed today. And it's not the first time that a worm or virus has stowed away on a trip into orbit.
Congress: Terror threat system crippled by technical flaws
A U.S. House subcommittee is charging that a $500 million IT project intended to "connect the dots" on terrorists and help prevent another 9/11 is a failure; it can't even handle basic Boolean search terms, such as "and, or and not."
Nortel uses USB drive to secure remote work
Nortel hopes to tackle the security of remote work with an "office on a stick," a USB drive that can link an employee's PC with a corporate VPN and keep all the information from a session encrypted.
Securing virtualized data centers
While server virtualization increases operational efficiencies, management flexibility and reduces total cost of ownership, it can also increase security risks.
595 immigrants arrested at electronics plant
Special agents with U.S. Immigration and Customs Enforcement (ICE) have arrested approximately 595 people suspected of being illegal aliens in the U.S., some with alleged ties to identity theft, at an electronics manufacturing plant in Laurel, Mississippi.
Mt. Sinai Medical Center looks to open standards for patient smartcards
New York City's Mt. Sinai Medical Center, which a few years ago began a project to give patients a smartcard storing identity and health records, is realigning its focus with an eye toward using format standards that could help spur many hospitals to back the idea of a single, shared patient card.
Is your data center ready for tomorrow's applications?
Click here to see what Gartner, Network World and other experts say about the new data center.
Newsfeed display by ISolveSystems
Network World on Firewalls
The latest firewall news, analysis and reviews on NetworkWorld.com.
How we tested Palo Alto's PA-4020 firewall
We spent two weeks putting the Palo Alto Networks PA-4020 through a series of tests designed to measure its capabilities. During our testing, the PA-4020 was connected to the Internet and was able to download virus, threat, and URL filtering updates. We also updated the software on the PA-4020 once during the test, from 2.0.1 to 2.0.3. We did encounter problems during the update, and had to have Palo Alto's technical support team apply fixes to our configuration to make it compatible with the new software version.
Is Palo Alto's firewall a firewall or not?
Palo Alto Networks has no illusions that a product on the market less than a year is going to have the feature set and depth that enterprise competitors Check Point, Cisco, and Juniper are offering. And, since most of the staff from Palo Alto are veterans from Check Point, Cisco, and Juniper, they were careful to design the PA-4020 so that it could be put behind (or in front) of an existing firewall at either layer 2 or layer 3.
You Can Hide So SOA Won't Run
As stated in my previous blog entry, one of the best ways to secure SOA services is to hide them behind a port knocking firewall. Port knocking makes your system appear as if it offers no services at all. Any cracker who comes a-knocking' will either conclude that nobody is home, or that your administrators are smart enough to make access so difficult it's not worth the trouble to try to break in.
Check Point IPS-1 fills a gap in its product line
Check Point has finally delivered some useful fruit of its December 2006 acquisition of NFR Security.
Jericho Forum: Visionaries with a visibility problem
Now in its forth year, the Jericho Forum has held the course in its role as a user forum advocating security alternatives to the perimeter firewall, arguing for its vision of "de-perimeterization" in an Internet-connected world of e-commerce and business collaboration. The group, though it's grown in membership, is gaining credibility but still manages to irk some critics who claim it's achieving little with its rhetoric.
Firewall vendors scramble to fix DNS problem
Nearly a month after a critical flaw in the Internet's Domain Name System was first reported, vendors of some of the most widely used firewall software are scrambling to fix a problem that can essentially undo part of the patches that address this bug.
SOA security more than authentication
Many years ago, I admired my sister's deadbolt. I made a silly comment as to how it looked like it would be impossible to break into the New York City apartment. My brother-in-law corrected me. "It's not impossible. It doesn't have to be," he said. "It just has to be harder to break into this apartment than into the other apartments." Think of it as a variation on the joke, "I don't have to outrun the bear. I just have to outrun you."
IPNetSentryX 1.6.5
OS X includes a basic firewall that helps to protect your Mac from a variety of outside intruders, such as hackers trying to run spam-spewing robots. In Leopard, though, the firewall-which is disabled by default-offers very little in the way of customization. At most you can specify programs and services (such as file sharing and screen sharing) to which outside connections are explicitly permitted or blocked. IPNetSentryX stands at the opposite end of the firewall software spectrum. The program from Sustainable Softworks has every bell and whistle that even the geekiest Mac user could hope for-and a complex user interface to match.
Microsoft patch knocks ZoneAlarm some users offline
Users of the popular ZoneAlarm firewall have reported dead Internet connections after installing one of the security updates issued by Microsoft Tuesday, according to online message forums.
Matasano launches multi-firewall dashboard
Security research and consulting firm Matasano has entered the security appliance game with a new product called Playbook, designed to take some of the pain out of managing large numbers of firewalls from different vendors.
Newsfeed display by ISolveSystems
|